It's set in the model form (usually) Table('name', Field('name', 'type', readable=False, writable=False), )
(both readable and writable are True by default) for a create/update form, only fields marked as writable=True are shown, and for readonly forms, only fields marked as readable=True are shown.