[IMP]check only api_key not secret key and check user group for sale config settings