Without complete config of router as well as your VPN server it is not easy to solve. My, best wild guess would be that you need to add a firewall-forward rule. (But not to the end, somewhere before "forward - drop all" rule.)
If you are unsure or just want to test it, you can put it on top of all rules:
/ip firewall filter add action=accept chain=forward dst-address=10.0.90.0/24 src-address=10.0.80.0/24 place-before=0