A user in a lower role can edit records of a user in a higher role. The lower role users were not registered as an account team. I want to prevent lower-level users from editing records of higher-level users.

what is the OWD defined currently for the Object? is it Public read-write?. is the user having a profile which can edit this object or is he having any permission set which gives edit access