only allow parameters that represent an attribute for where conditions