The code within your WAR can save uploaded files anywhere on the system, it doesn't even have to be anywhere in the JBoss AS directory. Similarly, your code can provide files for download from anywhere on the system. I recommend that you don't hard-code a directory location within you code, but instead provide a configuration option (system property or web.xml setting) that identifies the upload/download directory.