Maybe I messed up by sharing my cheap solutions.
You have your router and you have the access point that apparently has 2 ports as well. One for the connection to the router and the other for other use.
If you need more wire ports, a simple off the shelf router setup with the usual Google this "How to use a router as a WAP" would be all I need to finish the job.
I'm trying to help a friend set up their shop back behind his friends house with internet. Currently his friends home has internet and he has a shop building about 100 or so feet behind the house that he's renting out to my friend. He already ran a network cable in conduit in the ground from his friends house to the shop.
There is cable internet coming into the house and has a cable modem and router set up already for home internet. He would like to be able to keep shop separate or on it's own network so the shop can't see the house network and the house can't see the shop (for the most part or at least with a password or something).
I'm no pro but know more than my friend and before he called me he got hooked up with a Mikrotik CRS112-8G-4S-IN Router and a Unifi Access Point Pro. I believe he was sold the Access Point because he told the guy he wanted wireless in the shop and the Mikrotik has a built in switch for some other wire runs he's done in the shop but is he going to be able to lock down the shop network from the house network? The Mikrotik router doesn't have a WAN port but doesn't seem like it would need it seeing it will be going through the house router for NAT anyway.
Does it sound like this setup will work or is there a better way to do this?

Chowhound
Comic Vine
GameFAQs
GameSpot
Giant Bomb
TechRepublic