Check the Meta.excluded and Meta.fields attributes. Useful if you don't want to let all model's data be set by a user. A malicious one could set fields you didn't expect to be set ;)