gistfile1.js

  app.get('/test', function(req, res) {
    var fine = true;
    fields.filter(function(name) {
      if (thiz.restricted.indexOf(name) !== -1) {
        fine = false;
        return res.error(401, 'Field is restricted.');
      }
      query.where(name).equals(val);
    });

    if (!fine) {
      return;
    }

    query.exec(function(err, docs) {
      res.json(docs);
    });
  });