diff --git a/portal/templates/layouts/app.html b/portal/templates/layouts/app.html
index e2422b5..c60a05a 100644
--- a/portal/templates/layouts/app.html
+++ b/portal/templates/layouts/app.html
@@ -39,7 +39,8 @@
           <svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M19 21V5a2 2 0 00-2-2H7a2 2 0 00-2 2v16m14 0h2m-2 0h-5m-9 0H3m2 0h5M9 7h1m-1 4h1m4-4h1m-1 4h1m-5 10v-5a1 1 0 011-1h2a1 1 0 011 1v5m-4 0h4"/></svg>
           Organizations</a>
       </div>
-      <div id="adminLinks" class="hidden p-3">
+      <div id="adminLinks" class="p-3">
+        <script>if(!(JSON.parse(localStorage.getItem('ds_user')||'{}').is_super_admin))document.currentScript.parentElement.style.display='none';</script>
         <div class="border-t border-white/[0.08] mb-3"></div>
         <a href="/admin" class="sidebar-link {{if eq .ActiveNav "admin"}}active{{end}} flex items-center gap-3 px-3 py-2.5 rounded-lg text-base font-medium text-[#94a3b8] transition">
           <svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M10.325 4.317c.426-1.756 2.924-1.756 3.35 0a1.724 1.724 0 002.573 1.066c1.543-.94 3.31.826 2.37 2.37a1.724 1.724 0 001.066 2.573c1.756.426 1.756 2.924 0 3.35a1.724 1.724 0 00-1.066 2.573c.94 1.543-.826 3.31-2.37 2.37a1.724 1.724 0 00-2.573 1.066c-.426 1.756-2.924 1.756-3.35 0a1.724 1.724 0 00-2.573-1.066c-1.543.94-3.31-.826-2.37-2.37a1.724 1.724 0 00-1.066-2.573c-1.756-.426-1.756-2.924 0-3.35a1.724 1.724 0 001.066-2.573c-.94-1.543.826-3.31 2.37-2.37.996.608 2.296.07 2.572-1.065z"/><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M15 12a3 3 0 11-6 0 3 3 0 016 0z"/></svg>
@@ -70,7 +71,7 @@
     if (!token) window.location.href = '/app/login';
     const user = JSON.parse(localStorage.getItem('ds_user') || '{}');
     document.getElementById('userName').textContent = user.name || user.email || '';
-    if (user.is_super_admin) document.getElementById('adminLinks').classList.remove('hidden');
+    if (!user.is_super_admin) document.getElementById('adminLinks').style.display = 'none';
 
     function fetchAPI(path, opts = {}) {
       opts.headers = { ...opts.headers, 'Authorization': 'Bearer ' + token, 'Content-Type': 'application/json' };