Then you should only set your WLAN1 interface property called
DEFAULT FORWARDING to NO
and property DEFAULT AUTHENTIFICATION to YES
this way, when a new client comes into your public wlan he can authenticate and get ip address, but he cannot 'talk' to other clients because DEFAULT FORWARDING is off....
this should work fine i think...
what version of mikrotik you have??? is it licenced????
if it does not work then you should send more details about your wlan1 configuration...
got interface > wireless > and type print
and send here the output you get... this can help me and other guys on forum to help you...
Greets and good luck!