In all enterprise applications I've seen pretty much nothing gets actually deleted from persistent storage, it's just marked as deleted with a flag or delete date. If I'm designing such an application should I ever use `DELETE` requests? If they should be used, how exactly they should look like? For example, if I want to let's say block a credit card I would issue something like

```
POST /block_orders
card_number=123&reason=card_stolen

```

But the app doesn't look RESTful if it doesn't use all of the available verbs. Does `DELETE` has any place in enterprise?

UPD: Is it good design to allow to `DELETE` a resource if you can `GET` that resource later to view history of operations, for example?