CSV import (no access control)