diff --git a/migrations/20170119185310-appdb-add-readonly.js b/migrations/20170119185310-appdb-add-readonly.js
new file mode 100644
index 000000000..472e0a6b1
--- /dev/null
+++ b/migrations/20170119185310-appdb-add-readonly.js
@@ -0,0 +1,15 @@
+dbm = dbm || require('db-migrate');
+
+exports.up = function(db, callback) {
+    db.runSql('ALTER TABLE apps ADD COLUMN readonly BOOLEAN DEFAULT 1', function (error) {
+        if (error) console.error(error);
+        callback(error);
+    });
+};
+
+exports.down = function(db, callback) {
+    db.runSql('ALTER TABLE apps DROP COLUMN readonly', function (error) {
+        if (error) console.error(error);
+        callback(error);
+    });
+};
diff --git a/src/appdb.js b/src/appdb.js
index 3b0563aff..c715a6907 100644
--- a/src/appdb.js
+++ b/src/appdb.js
@@ -60,7 +60,7 @@ var assert = require('assert'),
 var APPS_FIELDS_PREFIXED = [ 'apps.id', 'apps.appStoreId', 'apps.installationState', 'apps.installationProgress', 'apps.runState',
     'apps.health', 'apps.containerId', 'apps.manifestJson', 'apps.httpPort', 'apps.location', 'apps.dnsRecordId',
     'apps.accessRestrictionJson', 'apps.lastBackupId', 'apps.oldConfigJson', 'apps.memoryLimit', 'apps.altDomain',
-    'apps.xFrameOptions', 'apps.sso' ].join(',');
+    'apps.xFrameOptions', 'apps.sso', 'apps.readonly' ].join(',');
 
 var PORT_BINDINGS_FIELDS = [ 'hostPort', 'environmentVariable', 'appId' ].join(',');