An import with source=server reads a file at an absolute path on the server, but it needed only the write ability. - Return 403 without the deploy or root ability, the same as other host paths outside the resource directory
