Sorry for the confusion.
openedx-lms-production-settings instead of openedx-lms-common-settings should make production.py file changes
tutor config save
tutor local/dev stop
tutor local/dev start
tutor local/dev run lms bash
./manage.py lms shell
from django.conf import settings
settnigs.CORS_ORIGIN_ALLOW_ALL