fix: group level change logic (#2730)

internal/rpc/group/group.go

@@ -1526,10 +1526,23 @@ func (g *groupServer) SetGroupMemberInfo(ctx context.Context, req *pbgroup.SetGr
 		case 0:
 			if !isAppManagerUid {
 				roleLevel := dbMembers[opUserIndex].RoleLevel
-				if roleLevel != constant.GroupOwner {
+				var (
+					dbSelf  = &model.GroupMember{}
+					reqSelf *pbgroup.SetGroupMemberInfo
+				)
 				switch roleLevel {
+				case constant.GroupOwner:
+					for _, member := range dbMembers {
+						if member.UserID == opUserID {
+							dbSelf = member
+							break
+						}
+					}
 				case constant.GroupAdmin:
 					for _, member := range dbMembers {
+						if member.UserID == opUserID {
+							dbSelf = member
+						}
 						if member.RoleLevel == constant.GroupOwner {
 							return nil, errs.ErrNoPermission.WrapMsg("admin can not change group owner")
 						}
@@ -1539,17 +1552,36 @@ func (g *groupServer) SetGroupMemberInfo(ctx context.Context, req *pbgroup.SetGr
 					}
 				case constant.GroupOrdinaryUsers:
 					for _, member := range dbMembers {
+						if member.UserID == opUserID {
+							dbSelf = member
+						}
 						if !(member.RoleLevel == constant.GroupOrdinaryUsers && member.UserID == opUserID) {
 							return nil, errs.ErrNoPermission.WrapMsg("ordinary users can not change other role level")
 						}
 					}
 				default:
 					for _, member := range dbMembers {
+						if member.UserID == opUserID {
+							dbSelf = member
+						}
 						if member.RoleLevel >= roleLevel {
 							return nil, errs.ErrNoPermission.WrapMsg("can not change higher role level")
 						}
 					}
 				}
+				for _, member := range req.Members {
+					if member.UserID == opUserID {
+						reqSelf = member
+						break
+					}
+				}
+				if reqSelf != nil && reqSelf.RoleLevel != nil {
+					if reqSelf.RoleLevel.GetValue() > dbSelf.RoleLevel {
+						return nil, errs.ErrNoPermission.WrapMsg("can not improve role level by self")
+					}
+					if roleLevel == constant.GroupOwner {
+						return nil, errs.ErrArgs.WrapMsg("group owner can not change own role level") // Prevent the absence of a group owner
+					}
 				}
 			}
 		case 1: