See http://www.silverstripe.org/ss-2013-004-privilege-escalation-through-group-and-member-csv-upload/