# "tutor config save" is not woring with tutor dev

**URL:** <https://discuss.openedx.org/t/tutor-config-save-is-not-woring-with-tutor-dev/17109>\
**Category:** Development\
**Tags:** how-to, tutor\
**Created:** [September 12, 2025, 1:48pm UTC](https://discuss.openedx.org/t/tutor-config-save-is-not-woring-with-tutor-dev/17109 "2025-09-12T13:48:45Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![utsavjari](https://avatars.discourse-cdn.com/v4/letter/u/aca169/32.png) [@utsavjari](https://discuss.openedx.org/u/utsavjari)\
**Post date:** [September 12, 2025, 1:48pm UTC](https://discuss.openedx.org/t/tutor-config-save-is-not-woring-with-tutor-dev/17109/1 "2025-09-12T13:48:45Z")

</div>

I’m running Tutor in development mode. When I run the command

```auto
tutor config save --set CORS_ORIGIN_ALLOW_ALL=True

```

the `config.yml` file is updated, but the changes don’t seem to take effect. I also checked the file `/openedx/edx-platform/lms/envs/tutor/development.py`, but the value there is not updated. Am I missing a step?

---

<div class="post-metadata">

**Author:** ![Abdul\_Muqadim](https://sea2.discourse-cdn.com/flex020/user_avatar/discuss.openedx.org/abdul_muqadim/32/9226_2.png) [@Abdul\_Muqadim](https://discuss.openedx.org/u/Abdul_Muqadim)\
**Post date:** [September 14, 2025, 6:46pm UTC](https://discuss.openedx.org/t/tutor-config-save-is-not-woring-with-tutor-dev/17109/2 "2025-09-14T18:46:01Z")

</div>

Hi @utsavjari ,  
you can refer to post here to set `CORS_ORIGIN_ALLOW_ALL=True` : [https://discuss.openedx.org/t/setting-cors-origin-allow-all/11121](https://discuss.openedx.org/t/setting-cors-origin-allow-all/11121)

Just please bear in mind that if you set `CORS_ORIGIN_ALLOW_ALL=True` in your **production** environment, your users will be vulnerable to attacks from other websites. You should be using `CORS_ORIGIN_WHITELIST` instead, unless you specifically want to expose your site to severe security issues.