Since you have a multitude of devices, the best thing is to show a network diagram, showing the relationship between the device, where internet comes into the picture and that also depicts the vlans flowing to the devices. This will help tremendously for a review.
Also for all MT devices, the complete config is required,
/export file=anynameyouwish (minus mikrotik device serial number, any public WANIP information, vpn keys etc.).
Sounds like you have considered most items but since configs are actually interrelated just looking at firewall rules is not sufficient to comment accurately on a config.
I am sure you have read this ref for vlans: http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1