ACLs between Vlans

[Thoms Bowlby]

Is there vacl's or away to delegate traffic between vlans on the same switch?
Core Switch=3400 cl 4 fiber ports all tagged ip routing enabled.
4 other switches (2x 2824, 2x 2524 connect to this switch via fiber. 1 fiber port per switch tagged.
Example of what I'm looking for.
On Core switch I have a server farm that is in an 192.168.10.0/24 that I don't want Hr to touch which has a 192.168.20.0/24.
As of right now I have 4 vlans that can all communicate to each other via intervlan routing. Now I'd like some control on who can do what. I understand the concept of ACL's but have never truly experimented with them. I now have an opportunity to experiment however this is on a live system that operates 24x7 that has no lab. I just would greatly appreciate some insight to how this rule would be applied and if its possible with this switch model. Thank-you for your expertise and I hope I supplied adequate information.