silverstripe / silverstripe-restfulserver

        // if custom fields are specified, only select these

        if (is_array($this->customFields)) {

            foreach ($this->customFields as $fieldName) {

                // @todo Possible security risk by making methods accessible - implement field-level security

                if ($obj->hasField($fieldName) || $obj->hasMethod("get{$fieldName}")) {

                    $dbFields[$fieldName] = $fieldName;

                }

            }

        } else {

            // by default, all database fields are selected

            $dbFields = DataObject::getSchema()->fieldSpecs(get_class($obj));

        }

        if (is_array($this->customAddFields)) {

            foreach ($this->customAddFields as $fieldName) {

                // @todo Possible security risk by making methods accessible - implement field-level security

                if ($obj->hasField($fieldName) || $obj->hasMethod("get{$fieldName}")) {

                    $dbFields[$fieldName] = $fieldName;

                }

            }

        }

        // add default required fields