title: tomcat security constraints
body: <p>How do you negate a security constraint in tomcat?</p>
  
  <p>Basically, I have one security constraint defined which setup up basic authentication for the entire context. </p>
  
  <p>How can I exclude one file, for example, /public-available.html from this? So I have authentication setup for everything, except this one resource.</p>