Add access control to the import controller actions