diff --git a/database.sql b/database.sql
index 314bf41..a58e462 100644
--- a/database.sql
+++ b/database.sql
@@ -10,6 +10,7 @@ CREATE TABLE IF NOT EXISTS users (
   email VARCHAR(160) NOT NULL UNIQUE,
   whatsapp VARCHAR(30) NOT NULL,
   password_hash VARCHAR(255) NOT NULL,
+  role ENUM('user', 'superadmin') NOT NULL DEFAULT 'user',
   created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
 );
 
diff --git a/server/server.js b/server/server.js
index 7a6ce23..f937b28 100644
--- a/server/server.js
+++ b/server/server.js
@@ -58,7 +58,8 @@ function publicUser(user) {
     id: user.id,
     name: user.name,
     email: user.email,
-    whatsapp: user.whatsapp
+    whatsapp: user.whatsapp,
+    role: user.role || "user"
   }
 }
 
@@ -116,7 +117,7 @@ app.post("/api/auth/register", async (req, res, next) => {
       [name, email.toLowerCase(), whatsapp, passwordHash]
     )
 
-    const user = { id: result.insertId, name, email: email.toLowerCase(), whatsapp }
+    const user = { id: result.insertId, name, email: email.toLowerCase(), whatsapp, role: "user" }
     res.status(201).json({ token: signUser(user), user: publicUser(user) })
   } catch (error) {
     if (error.code === "ER_DUP_ENTRY") {
@@ -152,7 +153,7 @@ app.post("/api/auth/login", async (req, res, next) => {
 
 app.get("/api/auth/me", auth, async (req, res, next) => {
   try {
-    const [rows] = await pool.query("SELECT id, name, email, whatsapp FROM users WHERE id = ?", [req.user.id])
+    const [rows] = await pool.query("SELECT id, name, email, whatsapp, role FROM users WHERE id = ?", [req.user.id])
     if (!rows[0]) {
       res.status(404).json({ message: "User tidak ditemukan." })
       return
@@ -261,6 +262,28 @@ app.delete("/api/products/:id", auth, async (req, res, next) => {
   }
 })
 
+app.delete("/api/admin/products/:id", auth, superadminOnly, async (req, res, next) => {
+  try {
+    const product = await findProductById(req.params.id)
+
+    if (!product) {
+      res.status(404).json({ message: "Produk tidak ditemukan." })
+      return
+    }
+
+    await pool.query("DELETE FROM products WHERE id = ?", [req.params.id])
+
+    if (product.image.startsWith("/uploads/")) {
+      fs.rm(path.join(uploadsDir, path.basename(product.image)), { force: true }, () => {})
+    }
+
+    res.json({ message: "Produk berhasil dihapus oleh superadmin." })
+  } catch (error) {
+    next(error)
+  }
+})
+
+
 app.use((error, req, res, next) => {
   if (error instanceof multer.MulterError) {
     res.status(400).json({ message: "Upload gagal. Ukuran foto maksimal 3MB." })
@@ -279,3 +302,22 @@ app.use((error, req, res, next) => {
 app.listen(port, () => {
   console.log(`SecondTech API berjalan di http://localhost:${port}`)
 })
+
+
+async function superadminOnly(req, res, next) {
+  try {
+    const [rows] = await pool.query(
+      "SELECT role FROM users WHERE id = ?",
+      [req.user.id]
+    )
+
+    if (!rows[0] || rows[0].role !== "superadmin") {
+      res.status(403).json({ message: "Hanya superadmin yang boleh mengakses fitur ini." })
+      return
+    }
+
+    next()
+  } catch (error) {
+    next(error)
+  }
+}
diff --git a/server/uploads/1778558868134-709165590.jpg b/server/uploads/1778558868134-709165590.jpg
deleted file mode 100644
index 831745a..0000000
Binary files a/server/uploads/1778558868134-709165590.jpg and /dev/null differ
diff --git a/src/components/DashboardSidebar.vue b/src/components/DashboardSidebar.vue
index 377bc3b..5820201 100644
--- a/src/components/DashboardSidebar.vue
+++ b/src/components/DashboardSidebar.vue
@@ -1,8 +1,25 @@
 <template>
   <aside class="card p-4">
     <div class="mb-6">
-      <p class="text-xs font-bold uppercase tracking-wider text-slate-500">Menu User</p>
+      <p class="text-xs font-bold uppercase tracking-wider text-slate-500">
+        Menu User
+      </p>
       <h2 class="mt-1 text-lg font-extrabold">Dashboard</h2>
+
+      <div v-if="currentUser" class="mt-4 rounded-xl bg-slate-50 p-3">
+        <p class="text-sm font-bold text-slate-800">
+          {{ currentUser.name }}
+        </p>
+        <p class="mt-1 text-xs text-slate-500">
+          {{ currentUser.email }}
+        </p>
+        <p
+          v-if="isSuperadmin"
+          class="mt-2 inline-flex rounded-full bg-red-50 px-3 py-1 text-xs font-bold text-red-700"
+        >
+          Superadmin
+        </p>
+      </div>
     </div>
 
     <nav class="grid gap-2">
@@ -10,18 +27,31 @@
         <LayoutDashboard size="18" />
         Barang Saya
       </RouterLink>
+
       <RouterLink class="side-link" to="/jual">
         <PlusCircle size="18" />
         Jual Barang
       </RouterLink>
+
       <RouterLink class="side-link" to="/marketplace">
         <Store size="18" />
         Marketplace
       </RouterLink>
+
       <RouterLink class="side-link" to="/tersimpan">
         <Heart size="18" />
         Barang Tersimpan
       </RouterLink>
+
+      <RouterLink
+        v-if="isSuperadmin"
+        class="side-link admin-link"
+        to="/admin/products"
+      >
+        <ShieldCheck size="18" />
+        Admin Marketplace
+      </RouterLink>
+
       <button class="side-link text-left" type="button" @click="logout">
         <LogOut size="18" />
         Logout
@@ -31,22 +61,66 @@
 </template>
 
 <script setup>
-import { useRouter } from "vue-router"
-import { Heart, LayoutDashboard, LogOut, PlusCircle, Store } from "lucide-vue-next"
-import { clearAuth } from "../utils"
+import { computed, onMounted, ref, watch } from "vue"
+import { useRoute, useRouter } from "vue-router"
+import {
+  Heart,
+  LayoutDashboard,
+  LogOut,
+  PlusCircle,
+  ShieldCheck,
+  Store
+} from "lucide-vue-next"
+import { clearAuth, fetchCurrentUser, getCurrentUser, getToken, setAuth } from "../utils"
 
 const router = useRouter()
+const route = useRoute()
+const currentUser = ref(getCurrentUser())
+
+const isSuperadmin = computed(() => {
+  return currentUser.value?.role === "superadmin"
+})
+
+watch(
+  () => route.fullPath,
+  () => {
+    currentUser.value = getCurrentUser()
+  }
+)
+
+async function refreshCurrentUser() {
+  if (!getToken()) return
+
+  try {
+    const data = await fetchCurrentUser()
+    setAuth({
+      token: getToken(),
+      user: data.user
+    })
+    currentUser.value = getCurrentUser()
+  } catch {
+    clearAuth()
+    currentUser.value = null
+  }
+}
 
 function logout() {
   clearAuth()
   router.push("/login")
 }
+
+onMounted(refreshCurrentUser)
 </script>
 
 <style scoped>
 .side-link {
   @apply flex w-full items-center gap-3 rounded-xl px-3 py-3 text-sm font-semibold text-slate-700 transition hover:bg-slate-100;
 }
+
+.admin-link {
+  @apply bg-red-50 text-red-700 hover:bg-red-100;
+}
+
 .router-link-active {
   @apply bg-brand-50 text-brand-700;
 }
diff --git a/src/components/Navbar.vue b/src/components/Navbar.vue
index a83f108..720ec6d 100644
--- a/src/components/Navbar.vue
+++ b/src/components/Navbar.vue
@@ -14,16 +14,41 @@
         <RouterLink class="nav-link" to="/jual">Jual Barang</RouterLink>
         <RouterLink class="nav-link" to="/dashboard">Dashboard</RouterLink>
         <RouterLink class="nav-link" to="/tersimpan">Tersimpan</RouterLink>
+
+        <RouterLink
+          v-if="isSuperadmin"
+          class="nav-link"
+          to="/admin/products"
+        >
+          Admin Marketplace
+        </RouterLink>
       </nav>
 
       <div class="hidden items-center gap-3 md:flex">
         <template v-if="currentUser">
-          <span class="text-sm font-bold text-slate-700">{{ currentUser.name }}</span>
-          <button class="btn-secondary !px-4 !py-2" @click="logout">Logout</button>
+          <span class="text-sm font-bold text-slate-700">
+            {{ currentUser.name }}
+          </span>
+
+          <span
+            v-if="isSuperadmin"
+            class="rounded-full bg-red-50 px-3 py-1 text-xs font-bold text-red-700"
+          >
+            Superadmin
+          </span>
+
+          <button class="btn-secondary !px-4 !py-2" @click="logout">
+            Logout
+          </button>
         </template>
+
         <template v-else>
-          <RouterLink to="/login" class="btn-secondary !px-4 !py-2">Login</RouterLink>
-          <RouterLink to="/register" class="btn-primary !px-4 !py-2">Register</RouterLink>
+          <RouterLink to="/login" class="btn-secondary !px-4 !py-2">
+            Login
+          </RouterLink>
+          <RouterLink to="/register" class="btn-primary !px-4 !py-2">
+            Register
+          </RouterLink>
         </template>
       </div>
 
@@ -34,17 +59,42 @@
 
     <div v-if="open" class="border-t border-slate-200 bg-white md:hidden">
       <div class="container-page grid gap-2 py-4">
-        <RouterLink class="mobile-link" to="/" @click="open=false">Home</RouterLink>
-        <RouterLink class="mobile-link" to="/marketplace" @click="open=false">Marketplace</RouterLink>
-        <RouterLink class="mobile-link" to="/jual" @click="open=false">Jual Barang</RouterLink>
-        <RouterLink class="mobile-link" to="/dashboard" @click="open=false">Dashboard</RouterLink>
-        <RouterLink class="mobile-link" to="/tersimpan" @click="open=false">Tersimpan</RouterLink>
+        <RouterLink class="mobile-link" to="/" @click="open = false">Home</RouterLink>
+        <RouterLink class="mobile-link" to="/marketplace" @click="open = false">Marketplace</RouterLink>
+        <RouterLink class="mobile-link" to="/jual" @click="open = false">Jual Barang</RouterLink>
+        <RouterLink class="mobile-link" to="/dashboard" @click="open = false">Dashboard</RouterLink>
+        <RouterLink class="mobile-link" to="/tersimpan" @click="open = false">Tersimpan</RouterLink>
+
+        <RouterLink
+          v-if="isSuperadmin"
+          class="mobile-link"
+          to="/admin/products"
+          @click="open = false"
+        >
+          Admin Marketplace
+        </RouterLink>
+
         <div v-if="currentUser" class="mt-2 grid gap-2">
-          <button class="btn-secondary !py-2 text-center" @click="logout">Logout</button>
+          <div class="rounded-xl bg-slate-50 px-3 py-2">
+            <p class="text-sm font-bold text-slate-800">{{ currentUser.name }}</p>
+            <p class="text-xs text-slate-500">{{ currentUser.email }}</p>
+            <p v-if="isSuperadmin" class="mt-1 text-xs font-bold text-red-700">
+              Superadmin
+            </p>
+          </div>
+
+          <button class="btn-secondary !py-2 text-center" @click="logout">
+            Logout
+          </button>
         </div>
+
         <div v-else class="mt-2 grid grid-cols-2 gap-2">
-          <RouterLink to="/login" class="btn-secondary !py-2 text-center" @click="open=false">Login</RouterLink>
-          <RouterLink to="/register" class="btn-primary !py-2 text-center" @click="open=false">Register</RouterLink>
+          <RouterLink to="/login" class="btn-secondary !py-2 text-center" @click="open = false">
+            Login
+          </RouterLink>
+          <RouterLink to="/register" class="btn-primary !py-2 text-center" @click="open = false">
+            Register
+          </RouterLink>
         </div>
       </div>
     </div>
@@ -52,16 +102,20 @@
 </template>
 
 <script setup>
-import { ref, watch } from "vue"
+import { computed, onMounted, ref, watch } from "vue"
 import { useRoute, useRouter } from "vue-router"
 import { Cpu, Menu } from "lucide-vue-next"
-import { clearAuth, getCurrentUser } from "../utils"
+import { clearAuth, fetchCurrentUser, getCurrentUser, getToken, setAuth } from "../utils"
 
 const open = ref(false)
 const route = useRoute()
 const router = useRouter()
 const currentUser = ref(getCurrentUser())
 
+const isSuperadmin = computed(() => {
+  return currentUser.value?.role === "superadmin"
+})
+
 watch(
   () => route.fullPath,
   () => {
@@ -69,21 +123,41 @@ watch(
   }
 )
 
+async function refreshCurrentUser() {
+  if (!getToken()) return
+
+  try {
+    const data = await fetchCurrentUser()
+    setAuth({
+      token: getToken(),
+      user: data.user
+    })
+    currentUser.value = getCurrentUser()
+  } catch {
+    clearAuth()
+    currentUser.value = null
+  }
+}
+
 function logout() {
   clearAuth()
   currentUser.value = null
   open.value = false
   router.push("/login")
 }
+
+onMounted(refreshCurrentUser)
 </script>
 
 <style scoped>
 .nav-link {
   @apply text-sm font-semibold text-slate-600 transition hover:text-brand-700;
 }
+
 .router-link-active {
   @apply text-brand-700;
 }
+
 .mobile-link {
   @apply rounded-xl px-3 py-2 text-sm font-semibold text-slate-700 hover:bg-slate-100;
 }
diff --git a/src/router/index.js b/src/router/index.js
index 58254c8..3ac9ca7 100644
--- a/src/router/index.js
+++ b/src/router/index.js
@@ -8,7 +8,8 @@ import DashboardView from "../views/DashboardView.vue"
 import SavedView from "../views/SavedView.vue"
 import LoginView from "../views/LoginView.vue"
 import RegisterView from "../views/RegisterView.vue"
-import { getToken } from "../utils"
+import AdminProductsView from "../views/AdminProductsView.vue"
+import { getCurrentUser, getToken } from "../utils"
 
 const routes = [
   { path: "/", name: "home", component: HomeView },
@@ -17,6 +18,12 @@ const routes = [
   { path: "/jual", name: "sell-product", component: SellProductView, meta: { requiresAuth: true } },
   { path: "/dashboard", name: "dashboard", component: DashboardView, meta: { requiresAuth: true } },
   { path: "/tersimpan", name: "saved", component: SavedView, meta: { requiresAuth: true } },
+  {
+    path: "/admin/products",
+    name: "admin-products",
+    component: AdminProductsView,
+    meta: { requiresAuth: true, requiresSuperadmin: true }
+  },
   { path: "/login", name: "login", component: LoginView },
   { path: "/register", name: "register", component: RegisterView }
 ]
@@ -30,6 +37,12 @@ router.beforeEach((to) => {
   if (to.meta.requiresAuth && !getToken()) {
     return "/login"
   }
+
+  const user = getCurrentUser()
+
+  if (to.meta.requiresSuperadmin && user?.role !== "superadmin") {
+    return "/dashboard"
+  }
 })
 
 export default router
diff --git a/src/utils.js b/src/utils.js
index 64d97e6..1754fc4 100644
--- a/src/utils.js
+++ b/src/utils.js
@@ -31,7 +31,14 @@ export function getCurrentUser() {
 
 export function setAuth({ token, user }) {
   localStorage.setItem("secondtech_token", token)
-  setLocal("secondtech_user", user)
+
+  setLocal("secondtech_user", {
+    id: user.id,
+    name: user.name,
+    email: user.email,
+    whatsapp: user.whatsapp,
+    role: user.role || "user"
+  })
 }
 
 export function clearAuth() {
@@ -56,6 +63,7 @@ async function requestJson(path, options = {}) {
     ...options,
     headers
   })
+
   const data = await response.json().catch(() => ({}))
 
   if (!response.ok) {
@@ -79,6 +87,10 @@ export function loginUser(payload) {
   })
 }
 
+export function fetchCurrentUser() {
+  return requestJson("/api/auth/me")
+}
+
 export function fetchProducts() {
   return requestJson("/api/products")
 }
@@ -111,6 +123,12 @@ export function deleteProductById(id) {
   })
 }
 
+export function deleteProductAsAdmin(id) {
+  return requestJson(`/api/admin/products/${id}`, {
+    method: "DELETE"
+  })
+}
+
 export function getSavedProducts() {
   return getLocal("secondtech_saved", [])
 }
diff --git a/src/views/AdminProductsView.vue b/src/views/AdminProductsView.vue
new file mode 100644
index 0000000..1167fc8
--- /dev/null
+++ b/src/views/AdminProductsView.vue
@@ -0,0 +1,113 @@
+<template>
+  <section class="container-page py-10">
+    <div class="mb-8">
+      <h1 class="text-3xl font-extrabold">Admin Marketplace</h1>
+      <p class="mt-2 text-slate-600">Kelola semua produk yang tampil di marketplace.</p>
+    </div>
+
+    <p v-if="errorMessage" class="mb-5 rounded-xl bg-red-50 px-4 py-3 text-sm font-semibold text-red-700">
+      {{ errorMessage }}
+    </p>
+
+    <div v-if="loading" class="card p-10 text-center">
+      <h2 class="text-xl font-extrabold">Memuat produk...</h2>
+    </div>
+
+    <div v-else-if="products.length" class="grid gap-4">
+      <div
+        v-for="product in products"
+        :key="product.id"
+        class="card grid gap-4 p-4 md:grid-cols-[140px_1fr_auto] md:items-center"
+      >
+        <img
+          :src="getProductImageUrl(product.image)"
+          :alt="product.title"
+          class="aspect-[4/3] w-full rounded-xl object-cover md:w-36"
+        />
+
+        <div>
+          <div class="flex flex-wrap items-center gap-2">
+            <span class="rounded-full bg-brand-50 px-3 py-1 text-xs font-bold text-brand-700">
+              {{ product.category }}
+            </span>
+            <span class="rounded-full bg-emerald-50 px-3 py-1 text-xs font-bold text-emerald-700">
+              {{ product.status }}
+            </span>
+          </div>
+
+          <h3 class="mt-3 font-extrabold">{{ product.title }}</h3>
+          <p class="mt-1 text-sm text-slate-500">
+            {{ product.seller }} • {{ product.location }} • {{ product.condition }}
+          </p>
+          <p class="mt-2 font-extrabold text-brand-700">
+            {{ formatRupiah(product.price) }}
+          </p>
+        </div>
+
+        <div class="flex flex-wrap gap-2 md:flex-col">
+          <RouterLink :to="`/produk/${product.id}`" class="btn-secondary !px-3 !py-2">
+            Detail
+          </RouterLink>
+          <button
+            class="rounded-xl bg-red-50 px-3 py-2 text-sm font-bold text-red-700 hover:bg-red-100"
+            @click="deleteAsAdmin(product.id)"
+          >
+            Hapus
+          </button>
+        </div>
+      </div>
+    </div>
+
+    <div v-else class="card p-10 text-center">
+      <h2 class="text-xl font-extrabold">Belum ada produk</h2>
+    </div>
+  </section>
+</template>
+
+<script setup>
+import { onMounted, ref } from "vue"
+import { API_BASE_URL, fetchProducts, formatRupiah, getProductImageUrl, getToken } from "../utils"
+
+const products = ref([])
+const loading = ref(true)
+const errorMessage = ref("")
+
+async function loadProducts() {
+  loading.value = true
+  errorMessage.value = ""
+
+  try {
+    const data = await fetchProducts()
+    products.value = data.products
+  } catch (error) {
+    errorMessage.value = error.message
+  } finally {
+    loading.value = false
+  }
+}
+
+async function deleteAsAdmin(id) {
+  if (!confirm("Yakin ingin menghapus produk ini dari marketplace?")) return
+
+  try {
+    const response = await fetch(`${API_BASE_URL}/api/admin/products/${id}`, {
+      method: "DELETE",
+      headers: {
+        Authorization: `Bearer ${getToken()}`
+      }
+    })
+
+    const data = await response.json().catch(() => ({}))
+
+    if (!response.ok) {
+      throw new Error(data.message || "Gagal menghapus produk.")
+    }
+
+    products.value = products.value.filter((product) => product.id !== id)
+  } catch (error) {
+    errorMessage.value = error.message
+  }
+}
+
+onMounted(loadProducts)
+</script>