Edit own permission not enforced

NID is set as the key (no other field is set as key)
UID is mapped along with several other fields.

The current user importing a CSV file through the IMPORT form has ability to update other users' nodes (user can specify other users' NIDs in the file) even though user is not an admin and only has edit own permission set for the content type.