Java EE (Java Enterprise Edition) General Discussion

I have a Struts-based web app where the controller servlet is mapped to a URL pattern "*.do". All the URL patterns ending in .do (*.do) are secured declaratively in web.xml. I have a need where I have to allow access to a particulat action without authenticating a user. Is there a way to achieve this only by using declarative security? Can I somehow specify using a security-constraint element in web.xml that I need this action to be insecured?

I guess I can achieve this using filters. But I would like to know if this could be done without any extra coding and just using declarative security.

Any help/pointers appreciated.