Hotspot , Users And Radius

Hello to all .

I have a problem . when i add a user on the radius server i has full access to mikrotik .

I dont want that .

I want : guest login ONLY hotspot
and : managment login both hotspot and mikrotik

At radius i have this
table : radgroupreply
id groupname attribute op value
1 guest Ascend-XMit-Rate = 512000
2 guest Ascend-Data-Rate = 512000
3 guest Idle-timeout = 600
4 managment Idle-timeout = 3000

Table: radcheck

id username attribute op value
1 managment Auth-Type := Accept
2 managment Cleartext-Password := managment
3 guest Auth-Type == Local
4 guest Password == guest

table : radusergroup

username groupname priority
guest guest 1


Any idea why i have this problem ?

Thanks for help .