update

myapps/pc_management/api/business_portal.py

@@ -250,6 +250,12 @@ def run_edit_admin_account():
         result = AdminBusiness.query.filter_by(business_id=business_id, user_id=admin.id, status=1).first()
         if not result:
             return jsonify(OPERATE_LEVEL_ERROR)
+    user_info = AdminAccount.query.filter_by(id=user_id).first()
+    if not user_info:
+        return jsonify(ACCOUNT_NOT_EXISTS_ERROR)
+    if user_info.level <= admin.level:
+        return jsonify(OPERATE_LEVEL_ERROR)
+
     admin_business = AdminBusiness.query.filter_by(business_id=business_id, user_id=user_id).first()
     if not admin_business:
         return jsonify(ADMIN_BUSINESS_NOT_EXIST)
@@ -257,7 +263,7 @@ def run_edit_admin_account():
         result = AdminBusiness.query.filter_by(business_id=business_id, status=1).all()
         total_rate = 0
         for i in result:
-            if i.user_id != user_id:
+            if i.user_id != int(user_id):
                 total_rate += i.rate
         if (total_rate + int(rate)) > 100:
             return jsonify(RATE_INVALID_ERROR)