Staff who have Write permissions on the calendar can submit calendar events via the Wizard Bar and Calendar Manager module.
We also make use of the authorisation process, so that events that are added can be moderated before being published.
However, in giving staff the ability to add events, they also get access to the spreadsheet import facility. What's more, they can select to get events authorised at the point of import.
We would like the ability to prevent staff from being able to bulk import events in this way. Being able to authorise at the point of import is useful for calendar administrators, but shouldn't be available to other staff.