is there an option in OData/EF to limit the fields a user can perform queries on (with for example $filter)? We have got big tables and don't want to put indexes on all (combinations of) table columns.
There's no built-in support for this type of limits. You can analyze the query yourself though. Either by looking at the incomming URL, or by analyzing the LINQ expression executed against the provider.