Maybe the importer can declare a subset of possible permission setups that it will allow, and make sure that the permissions are normalized into that form before importing?
Maybe the importer can declare a subset of possible permission setups that it will allow, and make sure that the permissions are normalized into that form before importing?