It should be possible to enable "import rights" and disable "import contents" to only read permissions.