FIX: User without add permissions should not be able to import CSVs