I'm NAT-ing, because I want local networks to see public network.
I have deleted the bridge, also.
All devices have mikrotik as their gateway.
Since you're not NAT-ing, then you shouldn't have chain=src-nat rules.
chain=forward, action=accept means that ALL packets can forward between the subnets. If you'll permit all, then you don't need a default deny rule. And if you don't have a default-deny rule, then it's permitted anyway. So this rule would be superfluous.
chain=input, action=accept means that every node on any of your subnets can connect to a service running on the Mikrotik itself. So like winbox, dns, etc. Typically you'd have a default-deny rule for the input chain and then allow service ports as required (like winbox, or whatever your preferred management interface is). But add the accept rule before your deny rule otherwise you can lock yourself out of the device...
With default config your physical interfaces may be in the same bridge. Good idea to delete the bridge.
Also with default config there may be masquerading on the ether1 interface. You'd have to get rid of that if you're using ether1.
The devices on each subnet would have to have their default gateway set to the IP you've given each vlan interface.
When a packet comes into the router whether on an ether interface or vlan interface, it will be routed.