Validation inside controller

because I allow the user to add new columns to a model

in 99.9% of cases you should not modify domain model at runtime. .1% reserved for barely realistic approach, I never heard about. would you explain a bit what is the problem you trying to solve that way?