Apach Tomcat - Disable file processing outside document root directory

Question

Is there a setting in Apache Tomcat to restrict file access outside the document root directory? Apache httpd analogue is AllowOverride None

Answer 1

I believe SecurityManager is what I need: https://tomcat.apache.org/tomcat-6.0-doc/security-manager-howto.html