diff --git a/packages/app/next.config.js b/packages/app/next.config.js
index 193799ed6..482cc4e24 100644
--- a/packages/app/next.config.js
+++ b/packages/app/next.config.js
@@ -20,6 +20,18 @@ const nextConfig = {
           },
         ],
       },
+      {
+        source: "/api/permissions",
+        headers: [
+          { key: "Access-Control-Allow-Credentials", value: "true" },
+          { key: "Access-Control-Allow-Origin", value: "*" },
+          { key: "Access-Control-Allow-Methods", value: "GET" },
+          {
+            key: "Access-Control-Allow-Headers",
+            value: "X-Requested-With, content-type, Authorization",
+          },
+        ],
+      },
     ]
   },
 }