Fix incorrect permission check in import api