Add missing permission check on `get_import_status`

Adds permission check to the `get_import_status` endpoint to block unauthorized calls.