Import permission is not restricted

[Nick Smith]

From the looks of the code, and by testing with a vanilla editor user, anyone can use the import feature.

Suggestion: add an explicit permission that can be assigned to groups, for finer control over who can use the feature.