I think tomcat can restrict or control what folders's contents that a client can see.
The OPs questions was ambiguous about what files he wanted clients to access and what files would be hidden. If the files are in the accessible folders the client will be able to access them.
I have several internet servers on my computers. One allows the client to go to any folder on the server. Some restrict the client's access to select folders.