Script is used on Hosting Subscription too, so such portal type shall be
protected against duplicates.

Such check is already done by allowing (or not) some transitions on workflow state

Client is sending Access-Control-Request-Headers, server shall respond with
Access-Control-Allow-Headers.

This allow to propagate destroyed state

It manages the Sale Packing List.