security scoped bookmarks is exactly the way to go. good starting point is apple documentation on AppStore sandbox (which includes sample code) and class reference of NSFileManager.
you then will not store the path in user defaults but the binary data of the bookmark.