Privileges required to remove an uploaded disk image (content type "import")

I'm not sure if this is a bug or a "works as intended" that I don't quite understand, but I'm confused by the permissions required to remove an uploaded disk image. As near as I can tell (both from the API viewer and from the error messages I'm receiving), removing an uploaded image of content type "import" requires full Datastore.Allocate privileges, while uploading only requires…