Fixed check on partial and search allowed fields.

controllers/ExampleController.php

@@ -4,6 +4,16 @@
 
 class ExampleController extends RESTController{
 
+ /**
+ * Sets which fields may be searched against, and which fields are allowed to be returned in
+ * partial responses. 
+ * @var array
+ */
+ protected $allowedFields = array(
+ 'search' => array('name', 'prince_name'),
+ 'partials' => array('name', 'location', 'prince_name', 'popular')
+ );
+
  private $exampleRecords = array(
  array('id' => 1, 'name' => 'Ariel', 'location' => 'Under The Sea', 'prince_name' => 'Eric', 'popular' => 'false'),
  array('id' => 2, 'name' => 'Snow White', 'location' => 'Forest', 'prince_name' => 'The Prince', 'popular' => 'true'),

controllers/RESTController.php

@@ -146,7 +146,7 @@ protected function parseRequest($allowedFields){
  $this->searchFields = $this->parseSearchParameters($searchParams);
 
  // This handly snippet determines if searchFields is a strict subset of allowedFields['search']
- if(!array_unique($allowedFields['search'] + $this->searchFields) === $allowedFields['search']){
+ if(array_diff(array_keys($this->searchFields), $this->allowedFields['search'])){
  throw new HTTPException(
  "The fields you specified cannot be searched.", 
  401,
@@ -165,7 +165,7 @@ protected function parseRequest($allowedFields){
  $this->partialFields = $this->parsePartialFields($fields);
 
  // Determines if fields is a strict subset of allowed fields
- if(!array_unique($allowedFields['partials'] + $this->partialFields) === $allowedFields['partials']){
+ if(array_diff($this->partialFields, $this->allowedFields['partials'])){
  throw new HTTPException(
  "The fields you asked for cannot be returned.", 
  401,