文档修正：校准Mermaid图方向与渲染可读性

docs/development/rbac-r2/03_data_scope_design.md

@@ -12,18 +12,14 @@
 
 ```mermaid
 flowchart TD
-    Req["客户端 HTTP Request<br/>(仅携带 Bearer JWT Token，禁止/忽略 query 或 body 中的 identityId)"]
-    Filter["Spring Security Filter: JwtAuthenticationTokenFilter<br/>(验签并提取 claims 中的 userId)"]
-    SecCtx["SecurityContextHolder.getContext().getAuthentication()<br/>(获取受信任的 LoginUser.getUserId())"]
-    Helper["Service 内部数据推导 (SecurityContextHelper)"]
+    Req["客户端 HTTP Request<br/>(仅携带 Bearer JWT，忽略请求体中的 identityId)"]
+    --> Filter["Spring Security Filter (JwtAuthenticationTokenFilter)<br/>验签并提取 claims 中的 userId"]
+    --> SecCtx["SecurityContextHolder (受信任上下文)<br/>获取 LoginUser.getUserId()"]
+    --> Helper["Service 内部推导 (SecurityContextHelper)"]
 
-    Req --> Filter
-    Filter --> SecCtx
-    SecCtx --> Helper
-
-    Helper -->|"拥有 train_teacher 角色"| TeacherRole["SELECT t_id FROM train_teacher WHERE user_id = #{userId}"]
-    Helper -->|"拥有 train_student 角色"| StudentRole["SELECT s_id FROM train_student WHERE user_id = #{userId}"]
-    Helper -->|"拥有 admin / train_admin 角色"| AdminRole["按管理员角色规则放行或基于组织机构过滤"]
+    Helper -->|"拥有 train_teacher 角色"| TeacherRole["SELECT t_id FROM train_teacher<br/>WHERE user_id = #{userId}"]
+    Helper -->|"拥有 train_student 角色"| StudentRole["SELECT s_id FROM train_student<br/>WHERE user_id = #{userId}"]
+    Helper -->|"拥有 admin / train_admin 角色"| AdminRole["管理员放行 / 组织机构过滤"]
 ```
 
 ### 1.1 核心铁律