Restricting certain actions in manager

Deleting and changing properties like verified, disabled... is all done with GET, isn't it? 
I might be wrong :) but if i am not, restricting them to POST is wrong.