Tomcat seems to ignore file permissions

[Guest_imported]

I am using RedHat 7.2 and Tomcat 3.3a. I have a download directory with individual user directories in it that I want viewable by a web browser. Most of the directories have a 775 permission setting so that the contents of the individual directories are viewable to anyone. However, a few have been set with 770 permissions so that not anyone can access the info. The problem is, that with a browser, anyone can still see the contents of these directories. Can someone tell me why, and what I need to do to fix the problem?

Thanks!