CSV Import requires file on server

Trying to do a CSV import doesn't do a file upload of a local file but instead seems to require the path to the file on the server.
This is rather silly for a web based application.

Shouldn't the machine be locked down? Our is.
Getting people to move their issue tracking from dodgy excel spreadsheets is now going to be a tedious task involving adminstrators instead of being a simple task.