This thread from 2006 says that it’s not possible to have both, WDS and client isolation enabled:
http://forum.mikrotik.com/viewtopic.php?f=7&t=9094&start=0&hilit=wds+ap+isolation
Is this still the case? Perhaps a form of pseudo bridging is available that allows for client isolation?
regards,
Michael